Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 11 hours ago

Senior Cybersecurity Engineer, Identity & Access Management

CHAOS Industries149 open roles

Where
El Segundo, California, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Cybersecurity Engineer, Identity & Access ManagementCHAOS Industries · El Segundo, California, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CHAOS Industries's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.0% of postings close within 7 days. Measured by our own scanner across the market. CHAOS Industries postings stay open a median of 36 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 9.0%7 days
  4. 15.5%14 days
  5. 34.1%30 days
This job: posted 11 hours ago

CHAOS Industries median: 36 days open

The posting

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.

CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London. For more information, please visit www.chaosinc.com.

Role Overview:

CHAOS is seeking a Senior Cybersecurity Engineer, Identity & Access Management to own the identity layer that protects our Controlled Unclassified Information and export-controlled technical data. This role’s primary goal is to make our IdP, IAM, PAM, PIM, and Secrets Management platforms work as one coherent system that meets CMMC Level 2, NIST SP 800-171, DFARS 252.204-7012, and ITAR, and that people can actually use.

You'll work alongside security operations, IT, HR, and compliance as the person who turns policy into working access controls, from onboarding through offboarding. This is a hands-on role with real influence over where our identity architecture goes next.

Responsibilities:

  • Design, build, and maintain identity architecture and role-based access control (RBAC) across cloud and on-premises directory services.
  • Own and automate the IAM portion of the joiner, mover, and leaver (JML) process across identity, directory, cloud, and secrets platforms, so that access is provisioned at hire, adjusted when roles change, and revoked promptly at departure. You coordinate with human resources and IT, who own the employee record and device steps.
  • Design and tune authentication policies, conditional access, phishing-resistant multi-factor authentication (MFA), and device compliance requirements.
  • Build identity-focused detections and threat hunts in the company's SIEM, EDR, and SOAR tools, and support the security operations center (SOC) during identity-related investigations.
  • Operate and mature a tiered administrative model, including privileged access workstations (PAWs) and dedicated administrator accounts.
  • Administer privileged identity management for just-in-time role activation and privileged access reviews.
  • Administer the enterprise password and secrets management platform, including role-based enforcement policies, vault structure, SSO integration, and vaulting of privileged and shared credentials.
  • Manage cloud infrastructure IAM, including role assignments, service identities, and workload identity federation.
  • Integrate software as a service (SaaS) and internal applications with single sign-on (SSO) through SAML and OpenID Connect, and with SCIM for automated provisioning.
  • Maintain Active Directory security, including account lifecycle hygiene, service accounts and group Managed Service Accounts (gMSAs), and ongoing attack path analysis.
  • Run periodic access reviews and produce assessment evidence for the NIST SP 800-171 Access Control (AC) and Identification and Authentication (IA) families.
  • Write and maintain IAM policies, standards, and procedures.

Minimum Requirements:

  • Bachelor’s degree or equivalent experience in computer science, cybersecurity, information security, Information Technology, Information Assurance, or a related field with 5+ years of progressively responsible cybersecurity engineering experience, or a Masters degree with 3+ years of relevant experience.
  • At least two years of experience focused on IAM.
  • Hands-on experience administering IdP in a production environment.
  • Hands-on experience administering Entra ID or Active Directory.
  • Experience running the provisioning, access change, and deprovisioning steps of a JML process.
  • Experience designing authentication policies and deploying phishing-resistant MFA across an organization.
  • Working knowledge of Kerberos, NTLM, LDAP, SAML, OAuth 2.0, OpenID Connect, and SCIM.
  • Scripting experience in PowerShell, Python, or a comparable language, including work with identity provider APIs.
  • Familiarity with NIST SP 800-207, Zero Trust Architecture and NIST SP 800-171 or NIST SP 800-53.
  • Experience producing compliance evidence for NIST SP 800-171, CMMC, FedRAMP, or a comparable framework.
  • Clear written communication, for both technical runbooks and policy documents.

Preferred Requirements:

  • Experience with IAM in a cloud platform such as Microsoft Azure or Amazon Web Services (AWS).
  • Experience administering an enterprise password or secrets management platform.
  • Experience with identity automation platforms.
  • Experience with Microsoft 365 GCC High or another US government cloud environment.
  • Experience implementing PIM, PAWs, or a tiered administrative model.
  • Experience with Active Directory attack path analysis tools such as BloodHound or PingCastle.
  • Proficiency in a Query Language such as Elasticsearch Query Language (ES|QL), Kusto Query Language (KQL), or similar.
  • Experience deploying certificate-based authentication or FIDO2 security keys.
  • A relevant certification, such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), or CISSP.
  • Experience working in the Defense Industrial Base (DIB).

Why CHAOS?

  • Health Benefits: Medical, dental, and vision benefits 100% paid for by the company
  • Additional benefits: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more
  • Our Perks: Free daily lunch while you're working onsite, fully-stocked kitchen, unlimited PTO, casual dress code
  • Compensation Components: Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses
  • Team Growth: 500+ employees and counting across 5 global offices

$140,000 - $200,000

The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations.

Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.

#LI-onsite

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CHAOS Industries's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on CHAOS Industries's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    CHAOS Industries's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.